Adding SFPs to bridge group on CCR1016-12S-1S+

I have a 12 SFP port CCR1016-12S-1S+, and I would like to try to add sfp2 through sfp12 to a bridge group to share one subnet, so that a CRS or other router can be plugged in to the other end of the SFP and use an address in the bridge port’s subnet.

This doesn’t seem to work on this CCR model, whereas it works on a Cloud Router Switch (CRS) if I change the interfaces from sfp to ether.

Below is the non-working code:

### CCR-SFP-TEST.POP (CCR)
### sfp1 = Uplink: 10.1.1.2/30, GW: 10.1.1.1
### sfp2-sfp12 = infrastructure bridge group localLAN: 192.168.1.1/24

### Initial system configuration ###

# Set system identity
/system identity set name="CCR-SFP-TEST.POP"


### sfp1 = Uplink: 10.1.1.2/30, GW: 10.1.1.1

# Uplink to WAN #1/2: add IP address for uplink to WAN
/ip address add address=10.1.1.2/30 interface=sfp1 network=10.1.1.0 comment="Uplink"
/interface ethernet set sfp1 comment="Uplink" 

# Uplink to WAN #2/2: add WAN route for the upstream gateway
/ip route
add dst-address=0.0.0.0/0 gateway=10.1.1.1 comment="Uplink"


### sfp2-sfp12 = infrastructure bridge group localLAN: 192.168.1.1/24

# Infrastructure bridge group #1/3: create a bridge named localLAN
/interface bridge
add name=localLAN l2mtu=1588 disabled=no comment="Infrastructure bridge group (sfp2-sfp12)"

# Infrastructure bridge group #2/3: add bridge ports of sfp2-sfp12 to the new bridge
/interface bridge port
add bridge=localLAN interface=sfp2
add bridge=localLAN interface=sfp3
add bridge=localLAN interface=sfp4
add bridge=localLAN interface=sfp5
add bridge=localLAN interface=sfp6
add bridge=localLAN interface=sfp7
add bridge=localLAN interface=sfp8
add bridge=localLAN interface=sfp9
add bridge=localLAN interface=sfp10
add bridge=localLAN interface=sfp11
add bridge=localLAN interface=sfp12

# Infrastructure bridge group #3/3: add an IP to the bridge
/ip address
add address=192.168.1.1/24 interface=localLAN network=192.168.1.0 comment="Infrastructure bridge group"

If I try to put my laptop or another router into one of the sfp ports in the bridge group above with the IP address 192.168.1.2 or such, it doesn’t work.

When I put the code above to work on a CRS (but change sfp1-12 to ether1-12), it works perfectly. Why is this? Do bridge ports / bridge groups work differently on CCRs?

for me it is not clear what exactly is not working.

But my best guess, from configuration you showed, is - do you have source NAT configured? SO that all the local addresses can get to outside properly?

Yes, the IPs work. I forgot to mention that I changed the IPs in the above example code to generic private ones but on my live lab it is all correctly routed public IPs.

The kicker is that when I put the same code on a CRS125 and only change the sfp1-12 to ether1-12 & sfp1, everything correctly works to a downstream router that is fed via sfp. When I use the code on the CCR, it doesn’t work.

I’m going to lab it a bit more today, but I was able to effectively rule out the downstream fiber/sfp adapters or the IPs/upstream routing being the problem by having it work on a CRS125 perfectly, but not on this CCR. And the reason we need to use this CCR is because we need to use all of the SFP ports to feed out in this huge building due to length whereas the CRS125 only has 1.

Turns out this was an SFP auto-negotiation issue, and nothing to do with the bridge group code.